SecurityRatty :: Latest Articles
Featured Articles :: SIEM: the Answer to Awkward Security Questions :: Terror, Anthrax, Explosives and More in Free, Downloadable 'Counterterrorism Calendar' :: Being Probed for phpMyAdmin ? :: NYC Skank Sues Google :: Anti-Debugging Series - Part III :: Terrorists Could Enlist '6-Legged Soldiers' in Bio-Attack :: Devolution and data-centric security :: The NSA on the Origins of the NSA :: CryptolA domain specific language for Cryptography :: Agents of 'cybergeddon' cannot go it alone, they need our help
Whats the one security question that you dont want to be asked about your company? I believe its the same question that Her Majesty the Queen raised when she visited the London School of Economics
The Justice Department puts out a free 2009 calendar depicting some of America's most wanted terror suspects, complete with info on explosives and biological and chemical threats. Get yours while supplies last
...information available to attackers during the reconnaissance portion of their attacks
If you lock down mywebsite.com/admin as described in the Apache How-To above, and you have additional directories under this mywebsite.com/admin/phpMyAdmin and mywebsite.com/admin/keys2Kingdom they will not be visible to the attacker (until they guess the...
...InformationProcess function which is used to retrieve information about a target process. The function prototype looks like the following
NTSTATUS WINAPI NtQueryInformationProcess( in HANDLE ProcessHandle, in PROCESSINFOCLASS ProcessInformationClass, out PVOID ProcessInformation, in ULONG ProcessInformationLength, out opt PULONG ReturnLength...
...information-centric security completely - and as in the case of all technology, there will always be work to be done! Therefore, one will be working with some sort of hybrid solutions for a while. There will still be areas where protecting the device or the network will make sense - these tools are widely available and have become mature....
Interesting a language just for cryptographic algorithms
Cryptol is a language for writing specifications for cryptographic algorithms. It is also a tool set for producing high-assurance, efficient implementations in VHDL, C, and Haskell. The Cryptol tools include the ability to equivalence check the reference specification against an...
Alright, the term "cybergeddon" might be too dramatic, but the truth is we are vulnerable to government or terrorist sponsored attacks against critical systems. It isnt enough anymore to release a statement that no known exploits resulted from a breach. What we need from our business and government leaders when a breach happens--hether data...